Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0ea67b9e-1c99-4b1c-8c50-055c10d4d55d/354629e2-2272-3f80-9eea-d3b14a2428b4.roa
File: 354629e2-2272-3f80-9eea-d3b14a2428b4.roa (raw, json)
Hash identifier: lcfjZPmjYHxS1IX8CPoxVlQCLGDtwHYwjqJy76F2Z5g=
Subject key identifier: 30:73:FA:BF:03:E5:BE:C2:A2:CD:4F:58:29:A3:27:AF:C2:EE:DF:D4
Certificate issuer: /CN=0ea67b9e-1c99-4b1c-8c50-055c10d4d55d
Certificate serial: 010D0C9F432858498C7E7FBD795BEB8634927D80
Authority key identifier: 8F:F9:BD:64:62:6F:68:AD:4F:51:81:74:78:57:9D:54:4A:A0:29:BC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0ea67b9e-1c99-4b1c-8c50-055c10d4d55d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0ea67b9e-1c99-4b1c-8c50-055c10d4d55d/354629e2-2272-3f80-9eea-d3b14a2428b4.roa
Signing time: Wed 16 Apr 2025 20:41:52 +0000
ROA not before: Wed 16 Apr 2025 20:41:52 +0000
ROA not after: Tue 15 Jul 2025 20:41:52 +0000
asID: 8987
IP address blocks: 206.219.224.0/21 maxlen: 24
Validation: Failed, certificate revoked on Mon 21 Apr 2025 15:41:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:8c:7e:7f:bd:79:5b:eb:86:34:92:7d:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ea67b9e-1c99-4b1c-8c50-055c10d4d55d
Validity
Not Before: Apr 16 20:41:52 2025 GMT
Not After : Jul 15 20:41:52 2025 GMT
Subject: CN=1466cc13-6fb6-4aba-8f8e-d60d90af13bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:5a:35:89:17:b5:7e:3a:2d:42:79:0b:26:eb:
31:f3:22:cd:53:84:cd:0a:19:79:b6:7f:57:4b:1b:
32:b0:33:52:af:16:c9:67:45:b5:c2:b4:9b:2f:04:
29:86:e3:ec:cd:e0:d6:2b:0a:35:a0:e9:02:51:89:
f6:60:44:45:51:5d:ed:4e:c0:15:f5:f6:32:b0:30:
28:e2:64:d6:bf:a2:27:b8:a9:18:32:1f:b1:18:ef:
f6:54:15:c7:52:e8:47:e9:66:bb:a7:6e:24:9e:38:
64:b0:f1:de:a8:eb:89:4e:0f:fe:2f:39:51:7b:2a:
df:6e:1b:02:ab:eb:0d:c1:a7:d6:a5:70:58:6d:83:
f8:4c:46:24:15:df:8b:21:69:df:08:04:1e:14:16:
e8:c8:5c:8d:ae:ef:44:bb:7e:33:45:66:c3:a7:92:
5e:58:d1:10:67:4e:63:df:0e:f0:bb:c7:48:a3:8d:
ef:18:b8:7a:e0:ee:e4:01:6f:55:0e:83:e9:26:8f:
22:7f:4a:cc:db:90:60:8f:8a:d9:f4:04:23:2f:24:
7b:6c:2b:2e:90:a5:ad:da:f9:fb:82:c2:15:1f:ec:
75:29:20:a6:65:f3:da:0d:63:9e:99:fc:c6:5c:5f:
3d:6b:81:a0:81:fa:3a:c5:bf:2a:3d:51:c5:bb:f0:
20:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:73:FA:BF:03:E5:BE:C2:A2:CD:4F:58:29:A3:27:AF:C2:EE:DF:D4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0ea67b9e-1c99-4b1c-8c50-055c10d4d55d/354629e2-2272-3f80-9eea-d3b14a2428b4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0ea67b9e-1c99-4b1c-8c50-055c10d4d55d/0ea67b9e-1c99-4b1c-8c50-055c10d4d55d.crl
X509v3 Authority Key Identifier:
keyid:8F:F9:BD:64:62:6F:68:AD:4F:51:81:74:78:57:9D:54:4A:A0:29:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0ea67b9e-1c99-4b1c-8c50-055c10d4d55d.cer
sbgp-ipAddrBlock: critical
IPv4:
206.219.224.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2d:9b:33:2b:76:24:f2:04:1e:81:af:d7:10:8c:63:eb:a3:4b:
5f:37:bd:20:06:b9:bb:67:cf:6d:4e:1d:f2:e1:fd:8d:2c:0f:
73:eb:1c:37:9f:11:4f:98:dd:fc:c2:58:91:21:63:08:34:22:
62:b1:7c:25:0b:4f:d6:a2:3f:df:5f:6f:12:7b:f8:f1:f1:32:
39:df:40:dd:13:76:dc:e0:b4:d2:44:9b:27:92:02:ec:1d:e9:
18:d9:e1:76:25:e2:f3:14:da:59:77:53:52:40:df:15:66:a0:
2d:dc:19:95:06:b4:8a:2f:a7:6a:4f:f0:95:bf:91:92:9b:8e:
ff:30:8f:d9:80:0d:fc:9f:c1:13:d8:6e:78:ee:3a:b5:ba:86:
2f:2e:54:05:a8:91:aa:de:06:a6:cf:e4:5d:1b:5a:b6:14:49:
dd:12:ba:6a:51:d6:f7:d5:5a:b9:f4:55:82:0e:ea:02:2c:b1:
3b:b4:77:0d:d6:16:ce:48:9c:61:81:5b:1c:27:3f:27:23:e3:
4a:7a:44:45:69:fe:6f:5f:64:43:54:62:ef:ad:80:3a:8d:b3:
62:e7:d8:02:4c:6d:66:ac:64:29:d0:fa:5e:b0:02:81:0f:19:
93:d2:2b:ab:c3:ee:c0:3a:18:9d:10:2a:12:3d:75:18:3d:80:
0c:ab:01:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 20:28:37 2025 by rpki-client